@openeudi/openid4vp 0.9.2 → 0.10.0

package/dist/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var x509 = require('@peculiar/x509');
 require('reflect-metadata');
+var x509 = require('@peculiar/x509');
 var uuid = require('uuid');
 var jose = require('jose');
 var cborX = require('cbor-x');
@@ -39,11 +39,16 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
+var init_reflect_polyfill = __esm({
+  "src/reflect-polyfill.ts"() {
+  }
+});
 
 // src/errors.ts
 exports.InvalidSignatureError = void 0; exports.ExpiredCredentialError = void 0; exports.UnsupportedFormatError = void 0; exports.MalformedCredentialError = void 0; exports.NonceValidationError = void 0; exports.HaipValidationError = void 0; exports.OpenID4VPError = void 0; exports.TrustAnchorNotFoundError = void 0; exports.CertificateChainError = void 0; exports.RevokedCertificateError = void 0; exports.RevocationCheckFailedError = void 0; exports.LotlFetchError = void 0; exports.LotlSignatureError = void 0; exports.SignedRequestBuildError = void 0; exports.UnsupportedJweError = void 0; exports.DecryptionFailedError = void 0; exports.MissingDecryptionKeyError = void 0; exports.MissingVerifierEncryptionKeyError = void 0; exports.MultipleCredentialsNotSupportedError = void 0;
 var init_errors = __esm({
   "src/errors.ts"() {
+    init_reflect_polyfill();
     exports.InvalidSignatureError = class extends Error {
       constructor(message = "Credential signature validation failed") {
         super(message);
@@ -207,6 +212,7 @@ function isEqual(bytes1, bytes2) {
 var ARRAY_BUFFER_NAME, BufferSourceConverter, STRING_TYPE, HEX_REGEX, BASE64_REGEX, BASE64URL_REGEX, Utf8Converter, Utf16Converter, Convert;
 var init_index_es = __esm({
   "node_modules/pvtsutils/build/index.es.js"() {
+    init_reflect_polyfill();
     ARRAY_BUFFER_NAME = "[object ArrayBuffer]";
     BufferSourceConverter = class _BufferSourceConverter {
       static isArrayBuffer(data) {
@@ -663,6 +669,7 @@ function padNumber(inputNumber, fullLength) {
 }
 var init_utils_es = __esm({
   "node_modules/pvutils/build/utils.es.js"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -1499,6 +1506,7 @@ function verifySchema(inputBuffer, inputSchema) {
 var ViewWriter, powers2, digitsString, NAME, VALUE_HEX_VIEW, IS_HEX_ONLY, ID_BLOCK, TAG_CLASS, TAG_NUMBER, IS_CONSTRUCTED, FROM_BER, TO_BER, LOCAL, EMPTY_STRING, EMPTY_BUFFER, EMPTY_VIEW, END_OF_CONTENT_NAME, OCTET_STRING_NAME, BIT_STRING_NAME, LocalBaseBlock, ValueBlock, LocalIdentificationBlock, LocalLengthBlock, typeStore, BaseBlock, BaseStringBlock, LocalPrimitiveValueBlock, _a$w, Primitive, DEFAULT_MAX_DEPTH, DEFAULT_MAX_NODES, DEFAULT_MAX_CONTENT_LENGTH, MAX_DEPTH_EXCEEDED_ERROR, MAX_NODES_EXCEEDED_ERROR, MAX_CONTENT_LENGTH_EXCEEDED_ERROR, LocalConstructedValueBlock, _a$v, Constructed, LocalEndOfContentValueBlock, _a$u, EndOfContent, _a$t, Null, LocalBooleanValueBlock, _a$s, Boolean2, LocalOctetStringValueBlock, _a$r, OctetString, LocalBitStringValueBlock, _a$q, BitString, _a$p, LocalIntegerValueBlock, _a$o, Integer, _a$n, Enumerated, LocalSidValueBlock, LocalObjectIdentifierValueBlock, _a$m, ObjectIdentifier, LocalRelativeSidValueBlock, LocalRelativeObjectIdentifierValueBlock, _a$l, RelativeObjectIdentifier, _a$k, Sequence, _a$j, Set2, LocalStringValueBlock, LocalSimpleStringValueBlock, LocalSimpleStringBlock, LocalUtf8StringValueBlock, _a$i, Utf8String, LocalBmpStringValueBlock, _a$h, BmpString, LocalUniversalStringValueBlock, _a$g, UniversalString, _a$f, NumericString, _a$e, PrintableString, _a$d, TeletexString, _a$c, VideotexString, _a$b, IA5String, _a$a, GraphicString, _a$9, VisibleString, _a$8, GeneralString, _a$7, CharacterString, _a$6, UTCTime, _a$5, GeneralizedTime, _a$4, DATE, _a$3, TimeOfDay, _a$2, DateTime, _a$1, Duration, _a, TIME, Any, Choice, Repeated, RawData;
 var init_index_es2 = __esm({
   "node_modules/asn1js/build/index.es.js"() {
+    init_reflect_polyfill();
     init_index_es();
     init_utils_es();
     ViewWriter = class {
@@ -3735,6 +3743,7 @@ ${values.join("\n")}` : `${blockName} :`;
 var AsnTypeTypes, AsnPropTypes;
 var init_enums = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/enums.js"() {
+    init_reflect_polyfill();
     (function(AsnTypeTypes2) {
       AsnTypeTypes2[AsnTypeTypes2["Sequence"] = 0] = "Sequence";
       AsnTypeTypes2[AsnTypeTypes2["Set"] = 1] = "Set";
@@ -3776,6 +3785,7 @@ var init_enums = __esm({
 var BitString2;
 var init_bit_string = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/types/bit_string.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_index_es();
     BitString2 = class {
@@ -3840,6 +3850,7 @@ var init_bit_string = __esm({
 var OctetString2;
 var init_octet_string = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/types/octet_string.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_index_es();
     OctetString2 = class {
@@ -3882,6 +3893,7 @@ var init_octet_string = __esm({
 // node_modules/@peculiar/asn1-schema/build/es2015/types/index.js
 var init_types = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/types/index.js"() {
+    init_reflect_polyfill();
     init_bit_string();
     init_octet_string();
   }
@@ -3947,6 +3959,7 @@ function defaultConverter(type) {
 var AsnAnyConverter, AsnIntegerConverter, AsnEnumeratedConverter, AsnIntegerArrayBufferConverter, AsnBitStringConverter, AsnObjectIdentifierConverter, AsnBooleanConverter, AsnOctetStringConverter, AsnUtf8StringConverter, AsnBmpStringConverter, AsnUniversalStringConverter, AsnNumericStringConverter, AsnPrintableStringConverter, AsnTeletexStringConverter, AsnVideotexStringConverter, AsnIA5StringConverter, AsnGraphicStringConverter, AsnVisibleStringConverter, AsnGeneralStringConverter, AsnCharacterStringConverter, AsnUTCTimeConverter, AsnGeneralizedTimeConverter, AsnNullConverter;
 var init_converters = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/converters.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_enums();
     init_types();
@@ -4061,6 +4074,7 @@ function isArrayEqual(bytes1, bytes2) {
 }
 var init_helper = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/helper.js"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -4068,6 +4082,7 @@ var init_helper = __esm({
 var AsnSchemaStorage;
 var init_schema = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/schema.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_enums();
     init_helper();
@@ -4200,6 +4215,7 @@ var init_schema = __esm({
 var schemaStorage;
 var init_storage = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/storage.js"() {
+    init_reflect_polyfill();
     init_schema();
     schemaStorage = new AsnSchemaStorage();
   }
@@ -4209,6 +4225,7 @@ var init_storage = __esm({
 var AsnType, AsnProp;
 var init_decorators = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/decorators.js"() {
+    init_reflect_polyfill();
     init_converters();
     init_enums();
     init_storage();
@@ -4248,6 +4265,7 @@ var init_decorators = __esm({
 var AsnSchemaValidationError;
 var init_schema_validation = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/errors/schema_validation.js"() {
+    init_reflect_polyfill();
     AsnSchemaValidationError = class extends Error {
       constructor() {
         super(...arguments);
@@ -4260,6 +4278,7 @@ var init_schema_validation = __esm({
 // node_modules/@peculiar/asn1-schema/build/es2015/errors/index.js
 var init_errors2 = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/errors/index.js"() {
+    init_reflect_polyfill();
     init_schema_validation();
   }
 });
@@ -4268,6 +4287,7 @@ var init_errors2 = __esm({
 var AsnParser;
 var init_parser = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/parser.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_enums();
     init_converters();
@@ -4554,6 +4574,7 @@ var init_parser = __esm({
 var AsnSerializer;
 var init_serializer = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/serializer.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_converters();
     init_enums();
@@ -4698,6 +4719,7 @@ var init_serializer = __esm({
 var AsnArray;
 var init_objects = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/objects.js"() {
+    init_reflect_polyfill();
     AsnArray = class extends Array {
       constructor(items = []) {
         if (typeof items === "number") {
@@ -4717,6 +4739,7 @@ var init_objects = __esm({
 var AsnConvert;
 var init_convert = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/convert.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_index_es();
     init_parser();
@@ -4743,6 +4766,7 @@ var init_convert = __esm({
 // node_modules/@peculiar/asn1-schema/build/es2015/index.js
 var init_es2015 = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/index.js"() {
+    init_reflect_polyfill();
     init_converters();
     init_types();
     init_decorators();
@@ -4764,6 +4788,7 @@ function __decorate(decorators, target, key, desc) {
 }
 var init_tslib_es6 = __esm({
   "node_modules/tslib/tslib.es6.mjs"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -4771,6 +4796,7 @@ var init_tslib_es6 = __esm({
 var IpConverter;
 var init_ip_converter = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/ip_converter.js"() {
+    init_reflect_polyfill();
     init_index_es();
     IpConverter = class {
       static isIPv4(ip) {
@@ -4944,6 +4970,7 @@ var init_ip_converter = __esm({
 var RelativeDistinguishedName_1, RDNSequence_1, Name_1, DirectoryString, AttributeValue, AttributeTypeAndValue, RelativeDistinguishedName, RDNSequence, Name;
 var init_name = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/name.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_index_es();
@@ -5038,6 +5065,7 @@ var init_name = __esm({
 var AsnIpConverter, OtherName, EDIPartyName, GeneralName;
 var init_general_name = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/general_name.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_ip_converter();
@@ -5115,6 +5143,7 @@ var init_general_name = __esm({
 });
 var init_object_identifiers = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/object_identifiers.js"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -5122,6 +5151,7 @@ var init_object_identifiers = __esm({
 var AuthorityInfoAccessSyntax_1, AccessDescription, AuthorityInfoAccessSyntax;
 var init_authority_information_access = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/authority_information_access.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_name();
@@ -5155,6 +5185,7 @@ var init_authority_information_access = __esm({
 var KeyIdentifier, AuthorityKeyIdentifier;
 var init_authority_key_identifier = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/authority_key_identifier.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_name();
@@ -5190,6 +5221,7 @@ var init_authority_key_identifier = __esm({
 var BasicConstraints;
 var init_basic_constraints = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/basic_constraints.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5212,6 +5244,7 @@ var init_basic_constraints = __esm({
 var GeneralNames_1, GeneralNames;
 var init_general_names = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/general_names.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_name();
@@ -5232,6 +5265,7 @@ var init_general_names = __esm({
 var CertificateIssuer_1, CertificateIssuer;
 var init_certificate_issuer = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/certificate_issuer.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_names();
@@ -5252,6 +5286,7 @@ var init_certificate_issuer = __esm({
 var CertificatePolicies_1, DisplayText, NoticeReference, UserNotice, Qualifier, PolicyQualifierInfo, PolicyInformation, CertificatePolicies;
 var init_certificate_policies = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/certificate_policies.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5357,6 +5392,7 @@ var init_certificate_policies = __esm({
 var CRLNumber;
 var init_crl_number = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_number.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5378,6 +5414,7 @@ var init_crl_number = __esm({
 var BaseCRLNumber;
 var init_crl_delta_indicator = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_delta_indicator.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5394,6 +5431,7 @@ var init_crl_delta_indicator = __esm({
 var CRLDistributionPoints_1, ReasonFlags, Reason, DistributionPointName, DistributionPoint, CRLDistributionPoints;
 var init_crl_distribution_points = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_distribution_points.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_name();
@@ -5491,6 +5529,7 @@ var init_crl_distribution_points = __esm({
 var FreshestCRL_1, FreshestCRL;
 var init_crl_freshest = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_freshest.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5511,6 +5550,7 @@ var init_crl_freshest = __esm({
 var IssuingDistributionPoint;
 var init_crl_issuing_distribution_point = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_issuing_distribution_point.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_crl_distribution_points();
@@ -5571,6 +5611,7 @@ var init_crl_issuing_distribution_point = __esm({
 var CRLReasons, CRLReason;
 var init_crl_reason = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_reason.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5611,6 +5652,7 @@ var init_crl_reason = __esm({
 var ExtendedKeyUsage_1, ExtendedKeyUsage;
 var init_extended_key_usage = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/extended_key_usage.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5630,6 +5672,7 @@ var init_extended_key_usage = __esm({
 var InhibitAnyPolicy;
 var init_inhibit_any_policy = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/inhibit_any_policy.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5651,6 +5694,7 @@ var init_inhibit_any_policy = __esm({
 var InvalidityDate;
 var init_invalidity_date = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/invalidity_date.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5675,6 +5719,7 @@ var init_invalidity_date = __esm({
 var IssueAlternativeName_1, IssueAlternativeName;
 var init_issuer_alternative_name = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/issuer_alternative_name.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_names();
@@ -5695,6 +5740,7 @@ var init_issuer_alternative_name = __esm({
 var KeyUsageFlags;
 var init_key_usage = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/key_usage.js"() {
+    init_reflect_polyfill();
     init_es2015();
     init_object_identifiers();
     (function(KeyUsageFlags3) {
@@ -5715,6 +5761,7 @@ var init_key_usage = __esm({
 var GeneralSubtrees_1, GeneralSubtree, GeneralSubtrees, NameConstraints;
 var init_name_constraints = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/name_constraints.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_name();
@@ -5762,6 +5809,7 @@ var init_name_constraints = __esm({
 var PolicyConstraints;
 var init_policy_constraints = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/policy_constraints.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5795,6 +5843,7 @@ var init_policy_constraints = __esm({
 var PolicyMappings_1, PolicyMapping, PolicyMappings;
 var init_policy_mappings = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/policy_mappings.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5827,6 +5876,7 @@ var init_policy_mappings = __esm({
 var SubjectAlternativeName_1, SubjectAlternativeName;
 var init_subject_alternative_name = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/subject_alternative_name.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_names();
@@ -5847,6 +5897,7 @@ var init_subject_alternative_name = __esm({
 var Attribute;
 var init_attribute = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/attribute.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     Attribute = class {
@@ -5869,6 +5920,7 @@ var init_attribute = __esm({
 var SubjectDirectoryAttributes_1, SubjectDirectoryAttributes;
 var init_subject_directory_attributes = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/subject_directory_attributes.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_attribute();
@@ -5886,6 +5938,7 @@ var init_subject_directory_attributes = __esm({
 });
 var init_subject_key_identifier = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/subject_key_identifier.js"() {
+    init_reflect_polyfill();
     init_object_identifiers();
     init_authority_key_identifier();
   }
@@ -5895,6 +5948,7 @@ var init_subject_key_identifier = __esm({
 var PrivateKeyUsagePeriod;
 var init_private_key_usage_period = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/private_key_usage_period.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5916,6 +5970,7 @@ var init_private_key_usage_period = __esm({
 var EntrustInfoFlags, EntrustInfo, EntrustVersionInfo;
 var init_entrust_version_info = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/entrust_version_info.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     (function(EntrustInfoFlags2) {
@@ -5962,6 +6017,7 @@ var init_entrust_version_info = __esm({
 var SubjectInfoAccessSyntax_1, SubjectInfoAccessSyntax;
 var init_subject_info_access = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/subject_info_access.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5981,6 +6037,7 @@ var init_subject_info_access = __esm({
 // node_modules/@peculiar/asn1-x509/build/es2015/extensions/index.js
 var init_extensions = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/index.js"() {
+    init_reflect_polyfill();
     init_authority_information_access();
     init_authority_key_identifier();
     init_basic_constraints();
@@ -6013,6 +6070,7 @@ var init_extensions = __esm({
 var AlgorithmIdentifier;
 var init_algorithm_identifier = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/algorithm_identifier.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_index_es();
@@ -6043,6 +6101,7 @@ var init_algorithm_identifier = __esm({
 var SubjectPublicKeyInfo;
 var init_subject_public_key_info = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/subject_public_key_info.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6066,6 +6125,7 @@ var init_subject_public_key_info = __esm({
 var Time;
 var init_time = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/time.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     Time = class Time2 {
@@ -6112,6 +6172,7 @@ var init_time = __esm({
 var Validity;
 var init_validity = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/validity.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_time();
@@ -6138,6 +6199,7 @@ var init_validity = __esm({
 var Extensions_1, Extension, Extensions;
 var init_extension = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extension.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     Extension = class _Extension {
@@ -6177,6 +6239,7 @@ var init_extension = __esm({
 var Version;
 var init_types2 = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/types.js"() {
+    init_reflect_polyfill();
     (function(Version3) {
       Version3[Version3["v1"] = 0] = "v1";
       Version3[Version3["v2"] = 1] = "v2";
@@ -6189,6 +6252,7 @@ var init_types2 = __esm({
 var TBSCertificate;
 var init_tbs_certificate = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/tbs_certificate.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6258,6 +6322,7 @@ var init_tbs_certificate = __esm({
 var Certificate;
 var init_certificate = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/certificate.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6286,6 +6351,7 @@ var init_certificate = __esm({
 var RevokedCertificate, TBSCertList;
 var init_tbs_cert_list = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/tbs_cert_list.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6344,6 +6410,7 @@ var init_tbs_cert_list = __esm({
 var CertificateList;
 var init_certificate_list = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/certificate_list.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6371,6 +6438,7 @@ var init_certificate_list = __esm({
 // node_modules/@peculiar/asn1-x509/build/es2015/index.js
 var init_es20152 = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/index.js"() {
+    init_reflect_polyfill();
     init_extensions();
     init_algorithm_identifier();
     init_attribute();
@@ -6414,6 +6482,7 @@ function getSkiBytes(cert) {
 }
 var init_x509_utils = __esm({
   "src/trust/x509-utils.ts"() {
+    init_reflect_polyfill();
   }
 });
 function mapX509AlgoToJwaName(cert) {
@@ -6519,6 +6588,7 @@ function dnIsUnder(childDn, subtreeDn) {
 var NAME_CONSTRAINTS_OID, DEFAULT_ALGORITHMS, ChainBuilder;
 var init_ChainBuilder = __esm({
   "src/trust/ChainBuilder.ts"() {
+    init_reflect_polyfill();
     init_es2015();
     init_es20152();
     init_errors();
@@ -6764,6 +6834,7 @@ function ecdsaDerToIeee(der, coordBytes) {
 }
 var init_ecdsa_util = __esm({
   "src/trust/ecdsa-util.ts"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -6798,6 +6869,7 @@ function bytesToHex(bytes) {
 var CrlFetcher;
 var init_CrlFetcher = __esm({
   "src/trust/CrlFetcher.ts"() {
+    init_reflect_polyfill();
     init_es2015();
     init_es20152();
     init_ecdsa_util();
@@ -6924,6 +6996,7 @@ var init_CrlFetcher = __esm({
 var AcceptableResponses_1, AcceptableResponses;
 var init_acceptable_responses = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/acceptable_responses.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     AcceptableResponses = AcceptableResponses_1 = class AcceptableResponses2 extends AsnArray {
@@ -6942,6 +7015,7 @@ var init_acceptable_responses = __esm({
 var ArchiveCutoff;
 var init_archive_cutoff = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/archive_cutoff.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     ArchiveCutoff = class ArchiveCutoff2 {
@@ -6962,6 +7036,7 @@ var init_archive_cutoff = __esm({
 var ExtendedRevoke;
 var init_extended_revoke = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/extended_revoke.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     ExtendedRevoke = class ExtendedRevoke2 {
@@ -6981,6 +7056,7 @@ var init_extended_revoke = __esm({
 // node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/nonce.js
 var init_nonce = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/nonce.js"() {
+    init_reflect_polyfill();
     init_es2015();
   }
 });
@@ -6989,6 +7065,7 @@ var init_nonce = __esm({
 var PreferredSignatureAlgorithms_1, PreferredSignatureAlgorithm, PreferredSignatureAlgorithms;
 var init_preferred_signature_algorithms = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/preferred_signature_algorithms.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7020,6 +7097,7 @@ var init_preferred_signature_algorithms = __esm({
 var ServiceLocator;
 var init_service_locator = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/service_locator.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7042,6 +7120,7 @@ var init_service_locator = __esm({
 // node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/index.js
 var init_extensions2 = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/index.js"() {
+    init_reflect_polyfill();
     init_acceptable_responses();
     init_archive_cutoff();
     init_extended_revoke();
@@ -7055,6 +7134,7 @@ var init_extensions2 = __esm({
 var KeyHash, ResponderID;
 var init_responder_id = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/responder_id.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7081,6 +7161,7 @@ var init_responder_id = __esm({
 var CertID;
 var init_cert_id = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/cert_id.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es20152();
     init_es2015();
@@ -7112,6 +7193,7 @@ var init_cert_id = __esm({
 var RevokedInfo;
 var init_revoked_info = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/revoked_info.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7134,6 +7216,7 @@ var init_revoked_info = __esm({
 var CertStatus;
 var init_cert_status = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/cert_status.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_revoked_info();
@@ -7161,6 +7244,7 @@ var init_cert_status = __esm({
 var SingleResponse;
 var init_single_response = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/single_response.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_cert_id();
@@ -7196,6 +7280,7 @@ var init_single_response = __esm({
 var Version2;
 var init_types3 = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/types.js"() {
+    init_reflect_polyfill();
     (function(Version3) {
       Version3[Version3["v1"] = 0] = "v1";
     })(Version2 || (Version2 = {}));
@@ -7206,6 +7291,7 @@ var init_types3 = __esm({
 var ResponseData;
 var init_response_data = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/response_data.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7243,6 +7329,7 @@ var init_response_data = __esm({
 var BasicOCSPResponse;
 var init_basic_ocsp_response = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/basic_ocsp_response.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7271,6 +7358,7 @@ var init_basic_ocsp_response = __esm({
 });
 var init_object_identifiers2 = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/object_identifiers.js"() {
+    init_reflect_polyfill();
     init_es20152();
   }
 });
@@ -7279,6 +7367,7 @@ var init_object_identifiers2 = __esm({
 var Signature;
 var init_signature = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/signature.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7305,6 +7394,7 @@ var init_signature = __esm({
 var Request;
 var init_request = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/request.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_cert_id();
@@ -7328,6 +7418,7 @@ var init_request = __esm({
 var TBSRequest;
 var init_tbs_request = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/tbs_request.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7359,6 +7450,7 @@ var init_tbs_request = __esm({
 var OCSPRequest;
 var init_ocsp_request = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/ocsp_request.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_signature();
@@ -7382,6 +7474,7 @@ var init_ocsp_request = __esm({
 var OCSPResponseStatus;
 var init_ocsp_response_status = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/ocsp_response_status.js"() {
+    init_reflect_polyfill();
     (function(OCSPResponseStatus2) {
       OCSPResponseStatus2[OCSPResponseStatus2["successful"] = 0] = "successful";
       OCSPResponseStatus2[OCSPResponseStatus2["malformedRequest"] = 1] = "malformedRequest";
@@ -7397,6 +7490,7 @@ var init_ocsp_response_status = __esm({
 var ResponseBytes;
 var init_response_bytes = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/response_bytes.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     ResponseBytes = class {
@@ -7419,6 +7513,7 @@ var init_response_bytes = __esm({
 var OCSPResponse;
 var init_ocsp_response = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/ocsp_response.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_ocsp_response_status();
@@ -7441,6 +7536,7 @@ var init_ocsp_response = __esm({
 // node_modules/@peculiar/asn1-ocsp/build/es2015/index.js
 var init_es20153 = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/index.js"() {
+    init_reflect_polyfill();
     init_extensions2();
     init_basic_ocsp_response();
     init_cert_id();
@@ -7507,6 +7603,7 @@ function hexToBigIntBytes(hex) {
 var DEFAULT_MAX_RESPONSE_AGE_MS, OcspClient;
 var init_OcspClient = __esm({
   "src/trust/OcspClient.ts"() {
+    init_reflect_polyfill();
     init_es2015();
     init_es20153();
     init_es20152();
@@ -7810,6 +7907,7 @@ function extractCrlUrls(cert) {
 var RevocationChecker;
 var init_RevocationChecker = __esm({
   "src/trust/RevocationChecker.ts"() {
+    init_reflect_polyfill();
     init_es20152();
     init_es2015();
     init_errors();
@@ -7906,6 +8004,7 @@ function mapLoA(uris) {
 var LOA_MAPPING;
 var init_lotl_loa_mapping = __esm({
   "src/trust/lotl-loa-mapping.ts"() {
+    init_reflect_polyfill();
     LOA_MAPPING = Object.freeze({
       // Qualified electronic signature / seal — substantial + high are both
       // expressed via `qualified` in ETSI, not LoA. The LoA URIs below apply to
@@ -7926,6 +8025,7 @@ function deriveServiceMetadata(service) {
 }
 var init_service_metadata = __esm({
   "src/trust/service-metadata.ts"() {
+    init_reflect_polyfill();
     init_lotl_loa_mapping();
   }
 });
@@ -7957,6 +8057,7 @@ function buildProvenance(service, anchorSki) {
 var ProvenanceResolver;
 var init_ProvenanceResolver = __esm({
   "src/trust/ProvenanceResolver.ts"() {
+    init_reflect_polyfill();
     init_service_metadata();
     init_x509_utils();
     ProvenanceResolver = class {
@@ -8024,6 +8125,7 @@ async function resolveProvenance(store, anchor) {
 var TrustEvaluator;
 var init_TrustEvaluator = __esm({
   "src/trust/TrustEvaluator.ts"() {
+    init_reflect_polyfill();
     init_errors();
     init_ChainBuilder();
     init_RevocationChecker();
@@ -8111,6 +8213,13 @@ var init_TrustEvaluator = __esm({
     };
   }
 });
+
+// src/index.ts
+init_reflect_polyfill();
+init_reflect_polyfill();
+
+// src/authorization.ts
+init_reflect_polyfill();
 function createAuthorizationRequest(input, query) {
   if (!input.clientId) throw new TypeError("clientId is required");
   if (!input.nonce) throw new TypeError("nonce is required");
@@ -8135,6 +8244,7 @@ function createAuthorizationRequest(input, query) {
 }
 
 // src/signed-authorization.ts
+init_reflect_polyfill();
 init_errors();
 var DEFAULT_SUPPORTED_ENC_VALUES = ["A128GCM", "A256GCM"];
 var SUPPORTED_SIGNING_ALGS = /* @__PURE__ */ new Set(["ES256", "ES384", "RS256"]);
@@ -8158,14 +8268,23 @@ async function createSignedAuthorizationRequest(input, query) {
       "vpFormatsSupported is required and must be non-empty"
     );
   }
+  const clientIdPrefix = input.clientIdPrefix ?? "x509_san_dns";
   const leafCert = new x509.X509Certificate(toArrayBuffer(input.certificateChain[0]));
-  const sanDnsNames = extractDnsNames(leafCert);
-  if (!sanDnsNames.includes(input.hostname)) {
+  if (clientIdPrefix === "x509_san_dns" && !input.hostname) {
     throw new exports.SignedRequestBuildError(
-      "hostname_cert_mismatch",
-      `leaf cert SAN DNSName values [${sanDnsNames.join(", ")}] do not include hostname "${input.hostname}"`
+      "missing_hostname",
+      'hostname is required for clientIdPrefix "x509_san_dns"'
     );
   }
+  if (input.hostname) {
+    const sanDnsNames = extractDnsNames(leafCert);
+    if (!sanDnsNames.includes(input.hostname)) {
+      throw new exports.SignedRequestBuildError(
+        "hostname_cert_mismatch",
+        `leaf cert SAN DNSName values [${sanDnsNames.join(", ")}] do not include hostname "${input.hostname}"`
+      );
+    }
+  }
   const signerPublicSpki = new Uint8Array(
     await crypto.subtle.exportKey("spki", input.signer.publicKey)
   );
@@ -8192,7 +8311,7 @@ async function createSignedAuthorizationRequest(input, query) {
     }
   }
   const state = input.state ?? uuid.v4();
-  const clientId = `x509_san_dns:${input.hostname}`;
+  const clientId = clientIdPrefix === "x509_hash" ? `x509_hash:${await sha256Base64Url(input.certificateChain[0])}` : `x509_san_dns:${input.hostname}`;
   const now = Math.floor(Date.now() / 1e3);
   const clientMetadata = {
     vp_formats_supported: input.vpFormatsSupported
@@ -8209,8 +8328,6 @@ async function createSignedAuthorizationRequest(input, query) {
     clientMetadata.jwks = { keys: [jwk] };
     const encValues = enc3 ?? [...DEFAULT_SUPPORTED_ENC_VALUES];
     clientMetadata.encrypted_response_enc_values_supported = encValues;
-    clientMetadata.authorization_encrypted_response_alg = "ECDH-ES";
-    clientMetadata.authorization_encrypted_response_enc = encValues[0];
   }
   const payload = {
     iss: clientId,
@@ -8255,6 +8372,10 @@ function bytesEqual(a, b) {
   }
   return true;
 }
+async function sha256Base64Url(derCert) {
+  const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", toArrayBuffer(derCert)));
+  return bytesToBase64(digest).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
 function bytesToBase64(bytes) {
   let s = "";
   for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]);
@@ -8267,6 +8388,7 @@ function toArrayBuffer(bytes) {
 }
 
 // src/haip.ts
+init_reflect_polyfill();
 init_errors();
 var HAIP_DOCTYPE_NAMESPACES = {
   "org.iso.18013.5.1.mDL": "org.iso.18013.5.1",
@@ -8381,7 +8503,14 @@ function isHaipQuery(query) {
   }
 }
 
+// src/presentation.ts
+init_reflect_polyfill();
+
+// src/parsers/mdoc.parser.ts
+init_reflect_polyfill();
+
 // src/crypto/cose-sign1.ts
+init_reflect_polyfill();
 init_errors();
 var decoder = new cborX.Encoder({ mapsAsObjects: false, useRecords: false, tagUint8Array: false });
 var HEADER_ALG = 1;
@@ -8482,6 +8611,7 @@ async function verifyCoseSign1(coseSign1, publicKey, allowedAlgorithms) {
 }
 
 // src/crypto/device-auth.ts
+init_reflect_polyfill();
 init_errors();
 var enc = new cborX.Encoder({ mapsAsObjects: false, useRecords: false, tagUint8Array: false });
 var HEADER_ALG2 = 1;
@@ -8607,6 +8737,7 @@ function extractTag24Inner(value) {
 }
 
 // src/crypto/digest.ts
+init_reflect_polyfill();
 init_errors();
 var decoder2 = new cborX.Encoder({ mapsAsObjects: false, useRecords: false });
 var ALLOWED_HASH_ALGS = /* @__PURE__ */ new Set(["SHA-256", "SHA-384", "SHA-512"]);
@@ -8671,6 +8802,7 @@ async function verifyAllDigests(nameSpaces, mso) {
 }
 
 // src/crypto/mso.ts
+init_reflect_polyfill();
 init_errors();
 var decoder3 = new cborX.Encoder({ mapsAsObjects: false, useRecords: false });
 function decodeDateLike(value) {
@@ -9113,6 +9245,7 @@ var MdocParser = class {
 };
 
 // src/parsers/sd-jwt.parser.ts
+init_reflect_polyfill();
 init_errors();
 var DEFAULT_ALLOWED_ALGORITHMS2 = ["ES256", "ES384", "ES512"];
 var sha256Hasher = async (data, _alg) => {
@@ -9484,7 +9617,11 @@ async function parsePresentation(vpToken, options) {
   };
 }
 
+// src/verify.ts
+init_reflect_polyfill();
+
 // src/decrypt-response.ts
+init_reflect_polyfill();
 init_errors();
 var SUPPORTED_ALG = "ECDH-ES";
 var SUPPORTED_ENC = /* @__PURE__ */ new Set(["A128GCM", "A256GCM"]);
@@ -9518,6 +9655,9 @@ async function decryptAuthorizationResponse(jwe, privateKey) {
     });
   }
 }
+
+// src/crypto/session-transcript.ts
+init_reflect_polyfill();
 var enc2 = new cborX.Encoder({ mapsAsObjects: false, useRecords: false, tagUint8Array: false });
 async function sha256(bytes) {
   return new Uint8Array(await crypto.subtle.digest("SHA-256", bytes));
@@ -9686,6 +9826,7 @@ async function verifyAuthorizationResponse(envelope, query, options) {
 init_errors();
 
 // src/trust/Cache.ts
+init_reflect_polyfill();
 var InMemoryCache = class {
   entries = /* @__PURE__ */ new Map();
   maxEntries;
@@ -9717,7 +9858,11 @@ var InMemoryCache = class {
   }
 };
 
+// src/trust/index.ts
+init_reflect_polyfill();
+
 // src/trust/TrustStore.ts
+init_reflect_polyfill();
 init_x509_utils();
 var StaticTrustStore = class {
   anchors = [];
@@ -9796,6 +9941,12 @@ function pushInto(map, key, anchor) {
 function bytesToHex3(bytes) {
   return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
+
+// src/trust/LotlTrustStore.ts
+init_reflect_polyfill();
+
+// src/trust/lotl-signing-anchors.ts
+init_reflect_polyfill();
 var PEM_ANCHORS = [
   `-----BEGIN CERTIFICATE-----
 MIIIoDCCBoigAwIBAgIUc8IcSUtVEKAMMvHm9QWU05kXsPUwDQYJKoZIhvcNAQEN
@@ -9852,6 +10003,7 @@ var EU_LOTL_SIGNING_ANCHORS = Object.freeze(
 );
 
 // src/trust/LotlFetcher.ts
+init_reflect_polyfill();
 init_errors();
 var XMLDSIG_NS = "http://www.w3.org/2000/09/xmldsig#";
 var LotlFetcher = class {
@@ -9962,6 +10114,12 @@ function buildImportAlgorithm(algName, pubKeyAlg) {
     hash: { name: hashName }
   };
 }
+
+// src/trust/LotlParser.ts
+init_reflect_polyfill();
+
+// src/trust/xml-util.ts
+init_reflect_polyfill();
 function firstChild(parent, ns, name) {
   const list = parent.getElementsByTagNameNS(ns, name);
   return list.length > 0 ? list.item(0) : null;
@@ -10052,6 +10210,7 @@ function parsePointer(el) {
 }
 
 // src/trust/NationalTlResolver.ts
+init_reflect_polyfill();
 var TSL_NS2 = "http://uri.etsi.org/02231/v2#";
 var NationalTlResolver = class {
   constructor(opts) {
@@ -10292,7 +10451,7 @@ function equalBytes(a, b) {
 
 // src/index.ts
 init_errors();
-var VERSION = "0.9.2";
+var VERSION = "0.10.0";
 /*! Bundled license information:
 
 pvtsutils/build/index.es.js: